This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: Q4nEvIqKodeSVrYmAGl61+xvEJsw/5JEl5QHYkfbAgw=
Subject key identifier: F2:2B:2C:F8:68:E9:5C:A8:B6:40:F9:44:F8:2C:3A:6E:EA:7E:5B:86
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 019B4C5F470F42243226257BCE15F6707AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 14D1
Signing time: Tue 23 Dec 2025 18:01:10 +0000
Manifest this update: Tue 23 Dec 2025 18:01:10 +0000
Manifest next update: Wed 24 Dec 2025 18:01:10 +0000
Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: 3+z8ZSQhaVadyv8Gd3VhowMcoWWVlzmj2KWJvHTUNFY=)
2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 15:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4c:5f:47:0f:42:24:32:26:25:7b:ce:15:f6:70:7a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Dec 23 18:01:10 2025 GMT
Not After : Dec 24 18:01:10 2025 GMT
Subject: CN=f22b2cf868e95ca8b640f944f82c3a6eea7e5b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:19:ef:c3:e9:97:cf:18:97:af:20:b2:c1:
24:61:60:76:45:9f:1b:11:41:f7:9a:f7:ad:96:51:
15:a7:0b:cf:55:ae:e1:d3:57:6f:25:8d:a2:84:2b:
44:cd:58:a3:17:75:4c:7d:95:e4:75:85:f8:00:da:
5c:12:92:53:fb:2a:95:c7:5a:fc:4e:3e:24:41:a3:
10:c2:eb:24:0a:1f:ab:cb:a4:fb:42:3c:2d:50:a7:
87:44:63:28:26:92:63:eb:00:10:25:f0:98:19:70:
9b:dc:d0:08:5f:72:30:a0:be:bf:ed:18:c1:7d:e7:
cd:fc:c9:ee:90:7b:74:d2:5e:a9:16:a6:79:41:be:
3c:3b:0f:71:6b:b5:69:7b:6e:17:a8:b4:32:62:d0:
af:52:e1:de:e2:87:5e:44:ad:fb:2c:09:55:f6:97:
e6:c0:40:ab:2d:d3:ba:c8:a0:86:29:f7:25:4b:74:
c5:84:13:03:3a:b7:30:90:3f:bc:1b:b7:53:17:a1:
c2:48:cc:b6:54:1c:36:e8:a8:e4:71:3a:e9:ba:da:
b6:da:98:4b:10:58:22:3f:2d:b2:6a:d8:51:03:2e:
05:8e:1a:34:1f:0d:ef:71:02:36:94:5c:04:39:83:
6e:90:d2:25:cf:7d:f7:79:0a:8a:95:53:f6:1d:72:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:2C:F8:68:E9:5C:A8:B6:40:F9:44:F8:2C:3A:6E:EA:7E:5B:86
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b6:98:b6:ec:4a:40:0f:5c:25:d1:c0:6d:c6:6d:1f:53:f0:
1e:4d:49:07:69:7a:29:29:b4:ee:01:3f:9a:c0:88:17:72:d1:
34:ce:36:84:60:d8:35:69:2b:9d:8d:5a:18:79:f2:23:0b:d7:
39:84:a6:1c:c1:c0:f5:fc:e9:a5:47:ce:06:3d:8b:3d:0e:86:
32:36:0e:22:b8:7d:32:42:63:ad:33:1f:0a:a2:7e:4a:5c:dc:
01:a5:35:1f:26:d0:61:a6:c4:98:ac:6a:13:12:b4:29:31:9c:
bf:1b:d2:01:03:5f:0f:2c:19:54:b1:e1:61:f6:a4:05:09:a4:
36:05:66:27:32:6a:be:eb:c0:ac:2d:32:2e:9f:13:30:49:36:
09:db:46:c5:4b:45:79:7d:d8:c1:b5:fe:75:01:c3:6a:83:96:
51:c1:7c:95:b1:f9:23:7a:97:62:0b:18:0a:28:3b:46:df:8f:
2a:b7:a1:82:f6:6b:56:83:ea:5e:df:42:db:bc:a9:ca:f0:06:
53:a1:b1:5b:81:ab:42:89:e4:25:a7:a7:0b:dc:46:30:c0:d5:
b5:86:57:61:94:81:22:2e:c1:ae:3d:3b:0e:52:36:2e:e6:0a:
2e:cb:f8:19:69:66:35:d5:c9:46:d3:68:f2:c6:52:68:28:fb:
a6:8a:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:34:39 2025 by rpki-client